Add message_length field

[lag]

I am trying to add calculated "message_length" field that would be a representation on character count in "message" field. Info is coming in from winlogbeat/filebeat/syslog if that makes any difference.

This is the code I currently have:

filter {
  ruby {
	code => "event['message_length'] = event['message'].length"
        }
}

But it's producing 0 results. No value is added into message_length field.

What am I doing wrong?

[Badger]

@lag

code => "event['message_length'] = event['message'].length"

Unless you are running an old version (4.x perhaps) that would have to be

code => "event.set('message_length', event.get('message').length)"

[lag]

@Badger

code => "event.set

Thank you! That works, running 7.x.